Credentials were sent in the special Credential Vault headers.
CredentialSource Class | Plumtree.Remote.Portlet Namespace